Dynamic Vlan with 802.1x and mac adress

Brian Julin BJulin at clarku.edu
Tue Mar 20 16:59:28 CET 2018


Yaƫl Rozanes <irozanes387 at hotmail.fr>:

> Since my searches didn't work, I would have liked to know if it was possible to couple @mac authentication with the 802.1x protocol to assign dynamic vlan with freeradius?

Generally what is done is to use just 802.1x authentication alone, and create rules
based on the Calling-Station-Id attribute which will contain some rendition of
your MAC address.

Some switches allow you to also run MAC authentication, but it is only there to
support clients that cannot do 802.1x and works just the same as without
802.1x (after a delay waiting to see no EAPOL frames.)


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list